General

  • Target

    ac55d452faf2567db044f827d0edf93c_JaffaCakes118

  • Size

    2.2MB

  • MD5

    ac55d452faf2567db044f827d0edf93c

  • SHA1

    44d0ae4d00f3b60282de10ad3e0f242b05b413c3

  • SHA256

    79cebed46f9f3fab8ebd548c67db29a52eeb6c19de27cee30ab7afe9daf37fb8

  • SHA512

    5f040a8979853fb6aabeee5386adcb30293ade3b7eb33dcabb7d029f24231d6a4fd8289ba2d26c0a45f15e0ff802e7473ce8345ba56602016ffb4309dc35042e

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZc:0UzeyQMS4DqodCnoe+iitjWwwI

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ac55d452faf2567db044f827d0edf93c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections